LangChain vulnerable to arbitrary code execution

An issue in LangChain prior to v.0.0.247 allows a remote attacker to execute arbitrary code via the prompt parameter...

Alluxio vulnerable to arbitrary code execution

An issue in Alluxio v.2.9.3 and before allows an attacker to execute arbitrary code via a crafted script to the username parameter of lluxio.util.CommonUtils.getUnixGroupsjava.lang.String...

CVE-2023-24478

Use of insufficiently random values for some Intel AgilexR software included as part of IntelR QuartusR Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

CVE-2023-38896

An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...

CVE-2023-39662

An issue in llamaindex v.0.7.13 and before allows a remote attacker to execute arbitrary code via the exec parameter in PandasQueryEngine function...

PT-2023-26644 · Comfast · Comfast Cf-Xr11

Name of the Vulnerable Software and Affected Versions: COMFAST CF-XR11 version 2.7.2 Description: An issue in the software allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub 410074 function at bin/webmgnt. Recommendations: For COMFAST CF-XR11 version 2.7.2,...

Cockpit Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit 2.6.2 and prior. A patch is available at commit 34ab31ee9362da51b9709e178469dbffd7717249...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2023-5949

Name of the Vulnerable Software and Affected Versions ScanCode.io versions prior to 32.5.2 Description The issue arises from inadequate validation and sanitization of the key parameter in the /license/ endpoint, specifically in the license details view function. This can result in a potential...

CVE-2023-40296

async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets...

GHSA-7RVP-XQJ7-RXF2 Withdrawn Advisory: Daylight Studio FUEL-CMS SQLi Vulnerability

Withdrawn Advisory This advisory has been withdrawn because this vulnerability does not affect a package in a supported ecosystem. This link has been maintained to preserve external references. Original Description SQL Injection vulnerability in file Basemodulemodel.php in Daylight Studio FUEL-CM...

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

CVE-2020-24922

Cross Site Request Forgery CSRF vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file...

CVE-2020-24222

Buffer Overflow vulnerability in jfifdecode function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN...

CVE-2022-29871

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

BELL-CVE-2022-38076

Bulletin has no description...

Buffer overflow

Improper buffer restrictions in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

BELL-CVE-2023-25775

Bulletin has no description...

Session fixation

Protection mechanism failure in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...